Vulnerability Report

CVE-2024-24420

Title: Linuxfoundation Magma Denial of Service (DoS)

DoS

Proof Of Concept

No public PoC currently indexed for CVE-2024-24420.

CWE Category CWE-617

Published Date Jan 21, 2025

Modified Date Jul 03, 2025

Exploit Status Not Found

Score 7.5 CVSS v3.1

Exploit Probability (EPSS)

0.11%

Vulnerability Summary

CVE-2024-24420: A reachable assertion in the decode_linked_ti_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.

Impacted Vendors

linuxfoundation 1

Reference Links

https://cellularsecurity.org/ransacked

CVSS v3.1

Source Entity 134c704f-9b21-4f2e-91b3-4a467353bcc0

Severity HIGH

7.5

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2024-24420 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

July 03, 2025 MODIFIED

Vulnerability data or affected products updated.

July 03, 2025 MODIFIED

Vulnerability data updated via NVD.

January 21, 2025 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector NETWORK

Complexity LOW

Privileges N/A

Interaction NONE

CVSS Vector String


                                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Stack

No specific products linked.